vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2018-20393

N/A
Published: December 23, 2018 at 09:00 PM UTC
Updated: June 17, 2026 at 01:52 AM UTC
16 products affected across 1 vendorTc7110.b FirmwareTc7200.d1i FirmwareTc7110.ar Firmware

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 2%

Description

Technicolor CGA0111 CGA0111E-ES-13-E23E-c8000r5712-170217-0829-TRU, CWA0101 CWA0101E-A23E-c7000r5712-170315-SKC, DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-170214a, TC7110.AR STD3.38.03, TC7110.B STC8.62.02, TC7110.D STDB.79.02, TC7200.d1I TC7200.d1IE-N23E-c7000r5712-170406-HAT, and TC7200.TH2v2 SC05.00.22 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

CGA0101 Firmware· Technicolor
95%
cwa0101e-a23e-c7000r5712-170315-skc
technicolor-cga0101 (same device)
CGA0111 Firmware· Technicolor
95%
cga0111e-es-13-e23e-c8000r5712-170217-0829-tru
technicolor-cga0111 (same device)
DPC3928SL Firmware· Technicolor
95%
d3928sl-psip-13-a010-c3420r55105-170214a
technicolor-dpc3928sl (same device)
Tc7110.ar Firmware· Technicolor
95%
std3.38.03
technicolor-tc7110-ar (same device)
Tc7110.b Firmware· Technicolor
95%
stc8.62.02
technicolor-tc7110-b (same device)
Tc7110.d Firmware· Technicolor
95%
stdb.79.02
technicolor-tc7110-d (same device)
Tc7200.d1i Firmware· Technicolor
95%
tc7200.d1ie-n23e-c7000r5712-170406-hat
technicolor-tc7200-d1i (same device)
Tc7200.th2v2.d1i Firmware· Technicolor
95%
sc05.00.22
technicolor-tc7200-th2v2-d1i (same device)
Cga0101· Technicolordevice
80%
All versions
Cga0111· Technicolordevice
80%
All versions

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (2)

x_refsource_MISCThird Party Advisory
Source: [email protected]
https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv
x_refsource_MISCExploitThird Party Advisory
Source: [email protected]
https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html

CVSS

5MEDIUM[email protected]
Confidentiality
PARTIAL
Integrity
NONE
Availability
NONE
Vector?

Quick Info

StatusMODIFIED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card